Electronic decision support device for the implementation of a critical function or of an assistance function by an avionics system, associated method and computer program

ABSTRACT

An electronic decision support device for implementing a critical function or an assistance function by an avionics system in response to a query from an operator. The device includes a module for receiving the query and a current context, and a processing module configured for generating a recommendation in response to the query, and the processing module includes a similarity-based reasoning module configured for generating a recommendation from an algorithm based on the content of a reference database, a rule-based reasoning module configured for generating a recommendation from a deterministic algorithm, an ontology-based reasoning module configured for generating a recommendation from an ontology-based algorithm, and an activation module configured for activating at least one of the reasoning modules.

CROSS-REFERENCE TO RELATED APPLICATIONS

This application is a U.S. non-provisional application claiming thebenefit of French Application No. 21 09619, filed on Sep. 14, 2021, thecontents of which are incorporated herein by reference in theirentirety.

FIELD OF THE INVENTION

The present invention relates to an electronic decision support devicefor the implementation by an avionics system of a critical function orof an assistance function.

BACKGROUND OF THE INVENTION

Assistance devices based on an artificial intelligence algorithm forsolving complex queries, are known.

The assistance device uses, e.g., an expert system. Such an expertsystem uses a large base of formal rules and is used by the operator inthe form of successive questions to which the expert system answers bysuccessively using the rules until the operator accepts the answer.

Alternatively, the assistance device may also use a reasoner based onontology. Such an ontology reasoner uses an ontology database, definingclasses, relations between classes, and rules. By applying relationsbetween classes and rules, the reasoner is able to make deductions.

Alternatively, the assistance device may also use a neural network, thepurpose of which is to deduce the function for linking a set of inputparameters to different types of output.

However, each artificial intelligence algorithm has limitations whichprevent the satisfactory use thereof for solving complex queries onavionic critical functions.

When the assistance device used is, e.g., an expert system, if anequivalence relation between reasoning elements is not defined, theexpert system is not able to establish the relation between theelements. A reasoner based on ontology is complex to implement and thecalculation time is long if the ontology is large. Finally, neuralnetworks have difficulty in offering an output different from samecontained in the learning base thereof, in addition to havingdifficulties explaining and presenting contradictory examples.

There is thus a need for obtaining an electronic decision support devicefor proposing a solution to the operator's query, which is both rapid inaction while being relevant and safe for the implementation of theavionic critical function or the avionic assistance function.

SUMMARY OF THE DESCRIPTION

The invention relates to an electronic decision support device for theimplementation by an avionics system of a critical function or of anassistance function.

The invention further relates to a control station including such anelectronic decision support device.

The invention further relates to a decision support method for theimplementation by an avionics system of a critical function or anassistance function.

The invention further relates to a non-transitory computer-readablemedium including a computer program including software instructionswhich, when executed by a computer, implement such a method.

In particular, the avionics system is carried on board an aircraft or ina remote-control station of an aircraft or in a control station of theaircraft.

The invention relates to the implementation of avionic criticalfunctions, i.e. functions which are critical for the safety of theassociated aircraft, the operators, the passengers and/or theenvironment of the aircraft.

The invention further relates to the implementation of so-calledassistance functions, i.e., which facilitate operations performed by theoperator or which increase a level of information given to the operator.Such avionic assistance functions, of a lower criticality level thanavionic functions, can be physically on-board the “Electronic FlightBag” (EFB) computers, or equivalent computers, on mission systems, ontablet computers, in a computer cloud, in a ground assistance device forthe operator or the air traffic control authorities.

Examples of such critical functions are flight controls or controlsrelating to communication with the exterior of the aircraft. Forexample, display functions relating to the recommended diversionairports are assistance functions.

In particular, in the avionics field, a critical function is defined,e.g., by Aerospace Recommended Practice standard ARP-4754A.

Implementing a critical function refers to performing one or a pluralityof calculations for generating at least one output datum associated withthe critical function, from at least one input datum. Implementing anassistance function refers to performing one or a plurality ofcalculations for generating at least one output datum associated withthe assistance function, from at least one input datum.

The invention relates in particular to the general field of assistancegiven to an operator of the avionics system for solving complex queriesof the operator in order to assist the operator in the decision-makingthereof. A query in particular is a search for information or solutionexpressed by the operator. In particular, the term “complex query”refers to a query involving complex calculations, relating to theprocessing of a large quantity of data with multifactorial constraints.

To this end, the subject matter of the invention is an electronicdecision support device for the implementation of a critical function orof an assistance function by an avionics system in response to a querysent by an operator of the avionics system, the avionics system beingapt to operate according to a current context defined by at least oneoperating parameter of the avionics system, the electronic deviceincluding:

-   -   a receiver module configured for receiving the query sent by the        operator and for receiving the current context,    -   a processing module configured for generating at least one        recommendation in response to the operator's query, the        processing module including:        -   a similarity-based reasoning module configured for            generating a recommendation based on the operator's query            and on the current context from an algorithm based on the            content of a reference database, the reference database            including a list of predetermined contexts, a list of            predetermined queries and predetermined recommendations,            each recommendation being associated with one of the            predetermined contexts and one of the predetermined queries,        -   a rule-based reasoning module, configured for generating a            recommendation from a deterministic algorithm based on the            operator's query and on the current context, the            deterministic algorithm consisting of a succession of            predetermined conditional instructions,        -   an ontology-based reasoning module configured for generating            a recommendation from an ontology-based algorithm depending            upon the operator's query and upon the current context, the            ontology defining a structured set of concepts and            relationships between the concepts modeling the operation of            the avionics system, and        -   an activation module configured for activating at least one            of the reasoning modules among the similarity-based            reasoning module, the rule-based reasoning module, and the            ontology-based reasoning module, and    -   a generation module configured for receiving at least one        recommendation from the processing module and for generating an        answer to the operator's query from the at least one received        recommendation.

According to other advantageous aspects of the invention, the electronicdecision support device includes one or more of the following features,taken individually or according to all technically possiblecombinations:

-   -   the device further includes at least one module among:        -   a display module configured for displaying the answer            addressed to the operator of the avionics system, and        -   a transmission module configured for transmitting the answer            to the avionics system for the implementation of the            critical function or of the assistance function according to            the answer,    -   each reasoning module being configured for generating an error        message sent to the activation module if a recommendation is not        generated by the reasoning module after same has been activated        by the activation module, the activation module being configured        for successively activating the reasoning module by similarity,        the rule-based reasoning module and the ontology-based reasoning        module, until one of the reasoning modules generates a        recommendation,    -   the processing module including a preprocessing module        configured for performing a semantic analysis of the operator's        query according to a predetermined formal rule and for        activating one of the reasoning modules according to the result        of the analysis of the operator's query,    -   the activation module being configured for activating at least        two of the reasoning modules, the processing module further        including a control module configured for comparing the        recommendations generated by the at least two reasoning modules        and for verifying whether the recommendations are consistent        with each other according to a predetermined consistency rule,        the generation module being configured for generating the answer        only if no inconsistency is detected by the control module,    -   the similarity-based reasoning module being configured for        comparing the operator query and the current context with the        predetermined queries and the predetermined contexts of the        reference database according to a similarity metric, the        recommendation generated by the similarity-based reasoning        module being equal to the recommendation associated with the        predetermined context and the predetermined query having the        greatest similarity to the current context and the operator's        query, the recommendation being generated only if the similarity        is greater than a predetermined threshold value, and    -   the generation module being further configured for sending to        the reference database, the generated answer associated with the        operator's query and with the current context.

The invention further relates to a control station including anelectronic device as defined above, the control station being chosenfrom the group consisting of: a control station arranged in an aircraft,a remote control station for an aircraft, in particular a drone, and acontrol station arranged in a ground air traffic control station.

The invention further relates to a decision support method forimplementing a critical function or an assistance function by anavionics system in response to a query from an operator of the avionicssystem, the avionics system being apt to operate according to a currentcontext defined by at least one operating parameter of the avionicssystem, the method being implemented by an electronic decision supportdevice as defined above, the method including at least the followingoperations:

-   -   receiving the query issued by the operator,    -   activating at least one of the reasoning modules among the        similarity-based reasoning module, the rule-based reasoning        module and the ontology-based reasoning module,    -   generating at least one recommendation in response to the query,        and    -   receiving at least one recommendation and generating an answer        to the operator's query from the at least one recommendation        received.

The invention further relates to a non-transitory computer-readablemedium including a computer program including software instructionswhich, when executed by a computer, implement a method as defined above.

BRIEF DESCRIPTION OF THE DRAWINGS

Such features and advantages of the invention will become clearer uponreading the following description, given only as a non-limiting example,and made with reference to the enclosed drawings, wherein:

FIG. 1 is a schematic representation of an aircraft and a controlstation each including an electronic device, in accordance with anembodiment of the present invention;

FIG. 2 is a schematic representation of the electronic device, inaccordance with an embodiment of the present invention; and

FIG. 3 is a flowchart for a decision support method, in accordance withan embodiment of the present invention, for implementing a criticalfunction by an avionics system implemented by the electronic device ofFIG. 2 .

DETAILED DESCRIPTION

A plurality of avionic electronic systems 10 are shown in FIG. 1 .

Each avionics system 10 is in particular on-board an aircraft 12. Theaircraft is typically an airplane, a helicopter, or a drone. In otherwords, aircraft 12 is a flying machine which can be piloted by anoperator 14, herein a pilot, via a control station 16. Control station16 is arranged inside aircraft 12 or remote from aircraft 12, inparticular in the case of a drone.

As a variant, also shown in FIG. 1 , each avionics system 10 is arrangedin a ground control station 18, inter alia a control tower in anairfield. Operator 14 controls the air traffic and in particularaircraft 12 via control station 16 arranged in control station 18.

Control station 16 further includes a human-machine interface 20configured for receiving a query from operator 14.

The query is in particular a search for information or a search for asolution to a query expressed by operator 14.

The human-machine interface 20 includes inter alia a keyboard and amicrophone. Human-machine interface 20 can, e.g., format the query in apredetermined format. As a variant, the query is, e.g., formatted aftera receiver module 26, introduced hereinafter, of the presentdescription.

Control station 16 further includes a display 22. Display 22 is interalia a heads-down display. The display is then a surface configured fordisplaying at least one image. Advantageously, the heads-down display isconfigured for displaying information relating to aircraft 12, such asspeed, altitude, orientation of aircraft 12 and/or information relatingto the external environment of aircraft 12, such as air trafficinformation and weather conditions around aircraft 12.

As a variant, display 22 is a heads-up display. Display 22 is then atleast partially transparent. Advantageously, heads-up display 22 is avisor integrated into a helmet suitable for being worn by operator 14.As a variant, heads-up display 22 is a transparent surface attached incontrol station 16 and placed in front of operator 14. As a furthervariant, heads-up display 22 is a windscreen of aircraft 12.

In particular, each avionics system 10 is configured for implementing anavionic critical function or an avionic assistance function. The avioniccritical function is typically selected inter alia from the groupconsisting of: aircraft 12 flight control, aircraft 12 trajectorycalculation, selecting a destination airfield for aircraft 12, and anair traffic control command, changing the communication frequency foraircraft 12.

In addition or as a variant, each avionics system 10 is configured forimplementing an avionic assistance function. The avionic assistancefunction is typically selected inter alia from a runway highlightingfunction, an optimized trajectory recommendation for aircraft 12, and anairport recommendation for aircraft 12 in the event of a change inflight plan.

However, a person skilled in the art understands that the invention isalso suitable for other complex queries concerning critical functions orassistance functions, including inter alia assistance with vehicle fleetmanagement, a nuclear reactor control process, temperature control in afurnace in a plant, navigation control of an autonomous motor vehicle,speed control in a railway vehicle, and route recommendation for anautonomous vehicle.

Each avionics system 10 is suitable for operating according to a currentcontext defined by at least one operating parameter associated with theavionics system 10.

Each operating parameter is a datum which is characteristic of thecurrent context. The current context corresponds to the set ofcircumstances under which avionics system 10 operates.

In particular, each operating parameter associated with avionics system10 is chosen from the group consisting of:

-   -   a flight parameter of aircraft 12 associated with avionics        system 10,    -   a flight plan associated with aircraft 12,    -   a mission assigned to aircraft 12,    -   a meteorological parameter associated with the environment of        aircraft 12, and    -   a parameter describing the operating status of avionics system        10.

The flight parameter is inter alia the geographical position of aircraft12, the altitude of aircraft 12, the speed of aircraft 12, or theheading of aircraft 12.

The flight plan for aircraft 12 includes inter alia a set of expectedcrossing points for aircraft 12 between the departure and destinationairfields.

The mission of aircraft 12 is the objective of the flight of aircraft12, inter alia transporting passengers and/or goods to a certaindestination, and reconnaissance or surveillance of an area of interest.

The meteorological parameter is inter alia the wind speed, the presenceof bad weather, and the visibility of the environment for the pilot.

A parameter describing the operating status of avionics system 10 isinter alia a Boolean type datum indicating the automatic detection ofsystem failures.

An electronic decision support device 24 for the implementation of acritical function or an assistance function, by one of avionics systems10 in response to a query sent by operator 14 of the avionics system 10,is further shown in FIG. 1 .

With reference to FIG. 2 , the electronic device includes a receivermodule 26, a processing module 28 and a generation module 30.

Advantageously, electronic device 24 further includes a display module32 and a transmission module 34.

Receiver module 26 is configured for receiving the query sent byoperator 14. In particular, receiver module 26 is configured forreceiving the query formatted by human-machine interface 20 and fortransmitting same to processing module 28.

Receiving module 26 is further configured for receiving the currentcontext. In particular, receiver module 26 is configured for receivingthe operating parameter(s) associated with avionics system 10 and forcharacterizing the current context. Receiver module 26 is suitable forreceiving inter alia the flight parameters by the flight control systemor the flight plan by the Flight Management System (FMS).

Processing module 28 is configured for generating at least onerecommendation in response to the query from operator 14.

The recommendation is in particular, a suggested action on one ofavionics systems 10, in particular a command acting on the avionicssystem 10 in order to modify the operation thereof in response to thequery of operator 14.

The query of operator 14 is made inter alia following an eventpotentially affecting the safety of aircraft 12. The event is inter aliaan event external to avionics system 10 presenting a possible risk forthe safety of avionics system 10 or an event internal to avionics system10, such as failure of one of the components of avionics system 10.

Processing module 28 includes three reasoning modules and an activationmodule 36.

Each reasoning module is configured for generating a recommendation as afunction of the query of operator 14 and of the current context receivedby receiver module 26.

The three reasoning modules are in particular, a similarity-basedreasoning module 38, a rule-based reasoning module 40, and anontology-based reasoning module 42.

Similarity-based reasoning module 38 is configured for generating arecommendation according to the query of operator 14 and of the currentcontext, from an algorithm based on the content of a reference database44.

Reference database 44 includes a list of predetermined contexts, a listof predetermined queries, and predetermined recommendations. Eachrecommendation is associated with one of the predetermined contexts andone of the predetermined queries.

Thus, reference database 44 includes a set of queries and contextsalready encountered or already envisaged upstream of the operation ofavionics system or systems 10 and the associated recommendation. Thecontent of reference database 44 has to be established, prior to theoperation of avionics system 10, so that each recommendation iscompliant with avionics safety rules applicable to avionics system 10.

Similarity-based reasoning module 38 is configured for comparingoperator query 14 and the current context to the predetermined queriesand predetermined contexts contained in reference database 44 accordingto a similarity metric.

The similarity metric is a function characterizing the similaritybetween two contexts and between two queries, in particular by comparingthe different operating parameters of the two contexts and by comparingthe keywords of the query.

The similarity metric is used for associating each pair {currentcontext, operator query} with a measurement of similarity with thedifferent pairs {context, query} contained in reference database 44. Thehigher the value of the measurement, the more similar are the two pairsaccording to the similarity metric used.

The similarity metric is inter alia the so-called cosine similarityfunction. Cosine similarity is used for calculating the similaritybetween two vectors to be compared. The cosine similarity is equal tothe scalar product of the two vectors, divided by the norm of the twovectors. The result is thus comprised between −1 and 1. The value −1indicates that the vectors are opposite, the value 0 indicates that thevectors are independent, and the value 1 indicates that the vectors aresimilar, in particular collinear. The intermediate values between −1 and1 are used for evaluating the degree of similarity between the twovectors.

Thus, similarity-based reasoning module 38 is configured for calculatingthe value of the similarity metric between the pair {current context,operator query} and the different pairs {context, query} contained inreference database 44, and then for sorting the pairs {context, query}from the most similar to the least similar with respect to the pair{current context, operator query}, from the calculated metric values.

The recommendation generated by similarity-based reasoning module 38 isthen equal to the recommendation associated with the predeterminedcontext and to the predetermined query having the greatest similaritywith the current context and with the query from operator 14. In otherwords, similarity-based reasoning module 38 selects the pair {context,query} contained in reference database 44, the similarity measurement ofwhich with the pair {current context, operator query} is the highest.

Nevertheless, generation of the recommendation by similarity-basedreasoning module 38 is inhibited if the similarity value is less than apredetermined threshold value. In other words, the recommendation isgenerated only if the similarity is greater than the predeterminedthreshold value.

The predetermined threshold value is determined so as to limit thesafety risks for avionics system 10, and is used to make sure that therecommendation generated is sufficiently relevant to answer the queryfrom operator 14 given the current context.

Similarity-based reasoning module 38 is configured for generating anerror message sent to activation module 36 if a recommendation is notgenerated, in particular if the greatest similarity obtained is lessthan the predetermined threshold value. Indeed, this means thatreference database 44 does not contain any pair {context, query} whichis sufficiently similar to the current situation.

As an example, in the context of a query aiming to determine the landingrunway of aircraft 12, reference database 44 includes in particular, thefollowing data shown in the table below.

TABLE 1 Context Query Runway Runway Runway Solution Runway no. 1 no. 2no. 3 Runway No. requested open open open selected 1 1 1 1 1 1 2 1 0 1 12 3 2 0 0 1 3 4 2 1 0 1 3

When aircraft 12 is in the current context “requested runway=1 andrunway no. 1 open=0 and runway no. 2 open=1”, then similarity-basedreasoning module 38 determines that the context of row 2 of the table isthe most similar to the current context, and thus generates therecommendation to choose runway no. 2.

In particular, in the present case, the similarity metric is ameasurement of the number of columns corresponding exactly to thecurrent context. Row 1 herein corresponds to a similarity value of 2,row 2 corresponds to a similarity value of 3, row 3 corresponds to asimilarity value of 1, and row 4 corresponds to a similarity value of 0.Thus, the highest similarity value is that corresponding to row 2 andtherefore the recommendation chosen is the recommendation associatedwith that row.

Herein, the value of the predetermined threshold is to be at least equalto 3, and thus similarity-based reasoning module 38 indeed generates therecommendation to choose runway no. 2.

Rule-based reasoning module 40 is configured for generating arecommendation from a deterministic algorithm depending upon the queryfrom operator 14 and on the current context.

The deterministic algorithm consists of a succession of predeterminedconditional instructions.

In particular, the deterministic algorithm consists inter alia of asuccession of “if, then” rules. Such rules are in particular constructedby a person skilled in the art or deduced from data coming from feedbackfrom avionics system or systems 10, inter alia data contained inreference database 44.

If the conditional instructions lead to a solution, the solution is thengenerated as a recommendation by rule-based reasoning module 40.

If the conditional statements lead to an empty solution set, thenrule-based reasoning module 40 is configured for generating an errormessage sent to activation module 36 indicating that a recommendation isnot generated.

As an example, for the same case of a query aiming to determine thelanding runway of aircraft 12, the predetermined conditionalinstructions are:

1) Rule: Calculation of the runway distance required for landingdepending upon the dynamics of aircraft 12, including speed and altitudethereof;

2) Rule: If the distance of runway i is greater than the runway distanceneeded, then the landing is said to be “OK”; and

3) Rule: If a plurality of runways “i” can be used for an “OK” landing,choose the runway with the highest runway distance.

Within such a framework, rule-based reasoning module 40 successivelyapplies rules 1, 2 and then 3 so as to try to determine a solution tothe query. E.g., if applying rule 1 leads to a required runway distanceof 100 m and three runways are nearby, including a runway A with alength of 150 m length and a runway B with a length of 120 m and arunway C with a length of 80 m, then rule-based reasoning module 40excludes runway C by applying rule 2, and then proposes runway A byapplying rule 3.

Ontology-based reasoning module 42 is configured for generating arecommendation from an ontology-based algorithm depending upon the queryof operator 14 and on the current context.

Ontology defines a structured set of concepts and relationships betweenconcepts modeling operation of avionics system 10. In particular,ontology is a semantic network which groups together a set of conceptslinked to each other by taxonomic relationships in order to prioritizeconcepts and semantics. Thus, knowledge is structured in the form of amodel formalized in descriptive logic. An ontology-based reasoner may beused for deducing by inference, more than the knowledge strictly writtenin the initial ontology.

Ontology-based reasoning module 42 is configured for generating an errormessage sent to activation module 36 if a recommendation is notgenerated, in particular if the ontology does not allow a recommendationto be deduced.

As an example, still in the context of a query aimed at determining thelanding runway of aircraft 12, the ontology includes an “airport” classwith “runway” subclasses. The airport class may inter alia have nameproperties. The runway subclass contains as properties the name, thelength of the runway and the status thereof, inter alia whether closedor open. There are X “airport” instances relating to the X modeledairports. There are “runway” instances relating to airport runways. The“Airport” instance and the “runway” instances are connected by aproperty {Airport Instance} a_for_runway {runway_Instance}. The ontologyfurther includes an “aircraft” class with the properties of aircraftname, aircraft speed, minimum runway distance for landing, and a name ofthe intended runway. Current aircraft 12 is represented in this ontologyby an instance, with the properties filled, in particular, by means ofthe current context. The “aircraft” instance is linked to a runwayinstance by the “will_land_at” property. Following sending of the queryto “find runway for landing”, ontology-based reasoning module 42 sends aquery to ontology asking same to search for the instance “runway” suchas:

-   -   runway length [“runway” instance]<minimum distance [“aircraft”        instance], and    -   runway status of the “runway” instance=open.

Activation module 36 is configured for activating at least one of thereasoning modules among similarity-based reasoning module 38, rule-basedreasoning module 40, and ontology-based reasoning module 42.

Following activation thereof by activation module 36, the reasoningmodule generates a recommendation or generates an error message if arecommendation is not likely to be generated.

According to an advantageous embodiment of the invention, activationmodule 36 is configured for successively activating similarity-basedreasoning module 38, rule-based reasoning module 40, and ontology-basedreasoning module 42, until one of the reasoning modules generates arecommendation.

Thus, following reception of a query from operator 14, activation module36 activates similarity-based reasoning module 38. If similarity-basedreasoning module 38 generates a recommendation without generating anerror message, processing module 28 transfers the recommendation togeneration module 30. Conversely, if similarity-based reasoning module38 generates an error message, activation module 36 then activatesrule-based reasoning module 40. Similarly, if rule-based reasoningmodule 40 generates a recommendation, the recommendation is sent togeneration module 30, and if an error message is generated, activationmodule 36 finally activates ontology-based reasoning module 42.

Activation module 36 may thus be used for adapting the reasoning load tothe complexity of the query from operator 14. The more complex thequery, the more complexity is needed from the reasoning module forsolving the query. Indeed, a recommendation is obtained rapidly bysimilarity-based reasoning module 38 when the situation is alreadyknown, i.e., when a query and a similar current context are present inreference database 44 and a predetermined recommendation is associatedtherewith. In such a case, no calculation is needed, apart from thesimilarity calculation, which does not require complex calculations.When the situation does not exist in reference database 44, a simplerule-based reasoning is conducted in order to try to obtain arecommendation. Finally, when the situation is not encountered andrule-based reasoning module 40 cannot give a solution, then theontology-based reasoning is conducted for finding a solution to thequery and for obtaining a recommendation.

As a variant or as a complement, processing module 28 further includes apreprocessing module 50 configured for performing a semantic analysis ofthe query from operator 14 according to a predetermined formal rule whenthe query is received by processing module 28, and for activating one ofthe reasoning modules depending on the result of the analysis query fromoperator 14.

In particular, preprocessing module 50 is configured for analyzingkeywords of the query from operator 14, and thus determining whether thequery has a sufficient probability of being already known to thereference database 44, or otherwise, if the query has a sufficientprobability of being processed correctly by rule-based reasoning module40. The formal rule is inter alia associated with a predetermined listof keywords each associated with one of the reasoning modules.

Thus, following the reception of a query from operator 14, preprocessingmodule 50 analyzes the query and determines, inter alia by means ofkeywords of the query, that similarity-based reasoning module 38 haslittle chance to generate a recommendation, and directly activatesrule-based reasoning module 40. Then, if rule-based reasoning module 40generates a recommendation, the recommendation is sent to generationmodule 30, or if an error message is generated, activation module 36activates ontology-based reasoning module 42.

As a variant or in addition, activation module 36 is configured foractivating at least two of the reasoning modules.

In particular, activation module 36 is configured for activating one ofthe reasoning modules and the reasoning module with complexityjust-above. E.g., if activation module 36 activates similarity-basedreasoning module 38, same further activates rule-based reasoning module40. If activation module 36 activates rule-based reasoning module 40,same further activates ontology-based reasoning module 42.

Processing module 28 further includes a control module 52 configured forreceiving the recommendations generated by the two reasoning modules andfor comparing same with each other. Control module 52 is configuredinter alia for checking whether the recommendations are consistent witheach other according to a predetermined consistency rule. Theconsistency rule is used to determine whether the two recommendationsgenerated are intended for a similar or even identical implementation ofthe critical function or of the support function.

In the example of a query aiming to determine the landing runway ofaircraft 12, two recommendations are consistent if same recommend thesame runway.

Control module 52 is configured for sending generation module 30 aninconsistency message if an inconsistency is detected.

Generation module 30 is configured for receiving the recommendation fromprocessing module 28 and for generating an answer to the query fromoperator 14, from the received recommendation.

The answer is, in particular, a solution to the information query fromoperator 14.

As a variant or in addition, the answer is a set point to be implementedby avionics system 10 in response to the query from operator 14.

In particular, the response corresponds to the recommendation received,shaped for possibly being applied by the corresponding avionics system10.

Generation module 30 is configured for generating the response only ifno inconsistency is detected by control module 52.

Advantageously, generation module 30 is further configured for sendingthe generated response associated with the query from operator 14 andwith the current context, to reference database 44, in particular whenthe associated recommendation is generated by rule-based reasoningmodule 40 or by ontology-based reasoning module 42. Thus, referencedatabase 44 includes an additional situation and similarity-basedreasoning module 38 is likely to determine the associated recommendationdirectly at the next similar query in a similar current context.

Generation module 30 is configured for sending the generated response todisplay module 32 or to transmission module 34.

Display module 32 is configured for displaying the answer to operator14, in particular on display 22. In particular, display module 32 isconfigured for displaying the answer on the heads-down display or theheads-up display in front of operator 14 who applies the instructionassociated with the answer, if appropriate.

As an example, display module 32 displays the number of the landingrunway determined by processing module 28.

As a variant or in addition, display module 32 is configured fordisplaying a button enabling the user either to accept or not accept theinstruction associated with the answer. The electronic device thenfurther includes an acquisition module configured for acquiring thechoice of the operator and, if the operator accepts the instruction, forsending the instruction to transmission module 34.

Thus, if operator 14, herein the pilot, accepts the proposed landingrunway, the answer is sent to the FMS.

Transmission module 34 is configured for transmitting the response tothe corresponding avionics system 10 for implementation of the criticalfunction or of the assistance function according to the instruction.

Thus, transmission module 34 is configured for sending the answerdirectly as soon as same is generated by generation module 30, toavionics system 10 so as to implement the critical function or theassistance function according to the query from operator 14.

In the example shown in FIG. 2 , electronic device 24 includes aninformation processing unit including inter alia a memory and aprocessor associated with the memory. Receiver module 26, processingmodule 28, generation module 30, and advantageously display module 32and transmission module 34 are each implemented in the form of asoftware program, or a software brick, which may be run by theprocessor. The memory is then apt to store a receiver software, aprocessing software, a generation software, and optionally, a displaysoftware and a transmission software. The processor is then apt to runeach of these software programs.

In a variant (not shown), receiver module 26, processing module 28,generation module 30, and advantageously display module 32 andtransmission module 34 are each produced in the form of a programmablelogic component, such as a field programmable gate array (FPGA), orfurther in the form of a dedicated integrated circuit, such as anapplication specific integrated circuit (ASIC).

When electronic device 24 is produced in the form of one or a pluralityof software programs, i.e., in the form of a computer program, same isfurther apt to be recorded on a computer-readable medium (not shown).The computer-readable medium is inter alia a medium apt to store theelectronic instructions and to be coupled to a bus of a computer system.As an example, the readable medium is an optical disk, a magneto-opticaldisk, a ROM memory, a RAM memory, any type of non-volatile memory (e.g.EPROM, EEPROM, FLASH, NVRAM), a magnetic card, or an optical card. Acomputer program containing software instructions is then stored on thereadable medium.

The operation of electronic decision support device 24 according to anembodiment of the invention will now be explained based on FIG. 3 whichshows a flowchart for a decision support method according to anembodiment of the present invention, for the implementation of acritical function or of the assistance function by avionics system 10,in response to a query issued by operator 14 of avionics system 10.

Initially, operator 14 is installed in control station 16.

Control station 16 is installed in aircraft 12 or on the ground, interalia in a control station 18, as shown in FIG. 1 .

During an initial operation 100, receiver module 26 receives a queryissued by operator 14. The query is, for example, a query for assigninga landing runway for aircraft 12. As another example, the query is aquery for changing the flight path of aircraft 12. As yet anotherexample, the query is a query for a reconfiguration solution followingthe detection of a failure of an avionics system 10.

During an optional operation 110, preprocessing module 50 analyzes thequery, according to a formal rule, in particular by searching forkeywords.

Then, during an operation 120, activation module 26 activates at leastone of the reasoning modules, in particular the reasoning modulecorresponding to the analysis performed by preprocessing module 50.

In an operation 130, a recommendation is generated in response to thequery.

As a variant, the method does not include operation 110, and duringoperation 120, activation module 36 is configured for successivelyactivating similarity-based reasoning module 38, rule-based reasoningmodule 40, and ontology-based reasoning module 42, until one ofreasoning modules 38, 40, 42 generates a recommendation during operation130. The recommendation is then sent to generation module 30.

Thus, activation module 36 activates similarity-based reasoning module38 during a sub-step 121. If similarity-based reasoning module 38generates a recommendation without generating an error message during asub-operation 131, processing module 28 transfers the recommendation togeneration module 30.

Conversely, if similarity-based reasoning module 38 generates an errormessage, activation module 36 then activates rule-based reasoning module40 during a sub-operation 122.

Similarly, if rule-based reasoning module 40 generates a recommendationduring a sub-operation 132, the recommendation is sent to generationmodule 30.

If an error message is generated by rule-based reasoning module 40,activation module 36 finally activates ontology-based reasoning module42 during a sub-operation 123, and ontology-based reasoning module 42then generates a recommendation during a sub-operation 133.

Then, during an operation 140, generation module 30 receives therecommendation and generates an answer to be implemented by thecorresponding avionics system 10 on the basis of the recommendationreceived.

During an operation 150, the answer is sent to display module 32, whichdisplays the answer in front of operator on display 22.

As a variant or in addition, the answer is sent to transmission module34, which sends the instruction associated with the answer to avionicssystem 10, for implementation of the critical function or of theassistance function according to the instruction, during an operation160.

In this way, it can be understood that the present invention has acertain number of advantages.

Indeed, the invention makes it possible to generate a relevant answerconcerning the implementation of a critical function or of an assistancefunction by adapting the complexity of the algorithm used, to thecomplexity of the query from operator 14, in particular by means ofactivation module 36 which may be used for adapting the reasoning loadto the complexity of the query from operator 14.

When the situation is already known, a recommendation is obtained veryquickly by similarity-based reasoning module 38. When the situation isnot known, the rule-based reasoning module 40 is used for deducing thesolution to be proposed. Finally, when the situation is not encounteredand the application of the rules cannot give a solution, then thereasoning based on ontology is conducted in order to obtain arecommendation.

Thus, a parallel can be made between the electronic device according tothe invention and the cognitive model of human reasoning described byRasmussen. This cognitive model is called “SRK” signifying “Skills,Rules, Knowledge”. Same describes the reasoning in the form of threeelements of increasing complexity: automatic skills used in the contextof simple tasks, calculation rules derived from routines, and knowledgederived from complex reasoning, used in case of confrontation with theunknown.

Electronic decision support device 24 according to the invention may beused for proposing a solution to the query from operator 14, which isrelevant, while being at the same time compatible with safety of theassociated avionics system 10.

1. An electronic decision support device for the implementation of acritical function or of an assistance function by an avionics system inresponse to a query issued by an operator of the avionics system, theavionics system being suitable for operating according to a currentcontext defined by at least one operating parameter of the avionicssystem, the electronic device comprising: a receiver module configuredfor receiving the query sent by the operator and for receiving thecurrent context; a processing module configured for generating at leastone recommendation in response to the query from the operator, theprocessing module comprising: a similarity-based reasoning moduleconfigured for generating a recommendation based on the query from theoperator and the current context from an algorithm based on the contentof a reference database, the reference database comprising a list ofpredetermined contexts, a list of predetermined queries andpredetermined recommendations, each recommendation being associated withone of the predetermined contexts and one of the predetermined queries,the similarity-based reasoning module being configured for comparing theoperator query and the current context with the predetermined queriesand the predetermined contexts of the reference database according to asimilarity metric, the recommendation generated by the similarity-basedreasoning module being equal to the recommendation associated with thepredetermined context and the predetermined query having the greatestsimilarity metric with the current context and the query from theoperator, the recommendation being generated only if the similaritymetric is greater than a predetermined threshold value; a rule-basedreasoning module, configured for generating a recommendation from adeterministic algorithm based on the query from the operator and on thecurrent context, the deterministic algorithm consisting of a successionof predetermined conditional instructions; an ontology-based reasoningmodule configured for generating a recommendation from an ontology-basedalgorithm depending upon the query from the operator and upon thecurrent context, the ontology defining a structured set of concepts andrelationships between the concepts modeling operation of the avionicsystem; and an activation module configured for activating at least oneof the reasoning modules among said similarity-based reasoning module,said rule-based reasoning module, and said ontology-based reasoningmodule, each reasoning module being configured for generating an errormessage sent to the activation module if a recommendation is notgenerated by the reasoning module after the activation thereof by theactivation module, and the activation module being configured forsuccessively activating said similarity-based reasoning module, saidrule-based reasoning module and said ontology-based reasoning moduleuntil one of the reasoning modules generates a recommendation; and ageneration module configured for receiving at least one recommendationfrom said processing module and for generating an answer to the queryfrom the operator, from the at least one recommendation received.
 2. Theelectronic device according to claim 1, further comprising at least onemodule among: a display module configured for displaying the answer tothe operator of the avionics system; and a transmission moduleconfigured for transmitting the answer to the avionics system forimplementation of the critical function or of the assistance functionaccording to the answer.
 3. The electronic device according to claim 1,wherein said processing module comprises a preprocessing moduleconfigured for performing a semantic analysis of the query from theoperator according to a predetermined formal rule, and activating one ofthe reasoning modules based on the result of the semantic analysis ofthe query from the operator.
 4. The electronic device according to claim1, wherein said activation module is configured for activating at leasttwo of the reasoning modules, said processing module further comprisinga control module configured for comparing the recommendations generatedby the at least two reasoning modules and checking whether therecommendations are consistent with each other according to apredetermined consistency rule, said generation module being configuredfor generating the answer only if no inconsistency is detected by saidcontrol module.
 5. The electronic device according to claim 1, whereinsaid generation module is further configured for sending the generatedanswer associated with the query of the operator and with the currentcontext, to the reference database.
 6. A control station comprising anelectronic decision support device according to claim 1, the controlstation being selected from the group consisting of a control stationarranged in an aircraft, a remote control station for an aircraft, and acontrol station arranged in an air traffic control station on theground.
 7. The control station of claim 6 wherein the remote controlstation for an aircraft comprises a remote control station for a drone.8. A decision support method for the implementation of a criticalfunction or of an assistance function by an avionics system in responseto a query issued by an operator of the avionics system, the avionicssystem being suitable for operating according to a current contextdefined by at least one operating parameter of the avionics system, themethod being implemented by an electronic decision support deviceaccording to claim 1, the method comprising: receiving the query issuedby the operator; activating at least one of the reasoning modules of theelectronic decision support device among the similarity-based reasoningmodule, the rule-based reasoning module, and the ontology-basedreasoning module, each reasoning module being configured for generatingan error message sent to the activation module of the electronicdecision support device if a recommendation is not generated by thereasoning module after the activation thereof by the activation module,the activation including successive activations of the similarity-basedreasoning module, the rule-based reasoning module and the ontology-basedreasoning module until one of the reasoning modules generates arecommendation; generating at least one recommendation in response tothe query; and receiving the at least one recommendation and generatingan answer to the query of the operator from the at least onerecommendation received.
 9. A non-transitory computer-readable mediumincluding a computer program comprising software instructions which,when executed by a computer, implement a method according to claim 8.